@maiaos/node 0.1.0-canary.44938d4.manual.1

package/dist/integration-authorization/pi-rpc-requests.js

@@ -0,0 +1,221 @@
+import { createHash } from "node:crypto";
+import { INTEGRATION_AUTHORIZATION_SCHEMA_VERSION, } from "@maiaos/protocol";
+import { Effect } from "effect";
+import { makeNodeRuntimeError, } from "../runtime/errors.js";
+import { applyPiRpcIntegration, planPiRpcIntegration, removePiRpcIntegration, requirePiRpcIntegrationPlatform, showPiRpcIntegration, withPiRpcPlanAdmission, } from "./pi-rpc-application.js";
+const requestDigest = (request) => createHash("sha256")
+    .update(JSON.stringify([request.method, request.parameters]))
+    .digest("hex");
+const resultIdentity = {
+    integration: "pi-rpc",
+    releaseQualified: false,
+    schemaVersion: INTEGRATION_AUTHORIZATION_SCHEMA_VERSION,
+};
+const fileIdentity = (value) => ({
+    device: value.device.toString(),
+    inode: value.inode.toString(),
+    sizeBytes: value.sizeBytes.toString(),
+});
+const publicOwnerKinds = (ownerKinds) => {
+    const probe = ownerKinds.includes("pi-rpc-probe");
+    const session = ownerKinds.includes("pi-rpc-session");
+    if (probe && session)
+        return ["pi-rpc-probe", "pi-rpc-session"];
+    if (probe)
+        return ["pi-rpc-probe"];
+    throw makeNodeRuntimeError("storage_corrupt", "The Pi RPC integration owner set is invalid.");
+};
+const publicAuthorizationIdentity = (authorization) => ({
+    adapterVersion: authorization.adapterVersion,
+    conversationPolicyRevision: authorization.conversationPolicyRevision,
+    entryFileIdentity: fileIdentity(authorization.artifact.entryIdentity),
+    entrySha256: authorization.artifact.entrySha256,
+    interpreterArchitecture: authorization.artifact.interpreterArchitecture,
+    interpreterFileIdentity: fileIdentity(authorization.artifact.interpreterIdentity),
+    interpreterSha256: authorization.artifact.interpreterSha256,
+    interpreterVersion: "24.19.0",
+    ownerKinds: publicOwnerKinds(authorization.ownerKinds),
+    packageClosureBytes: authorization.artifact.totalBytes.toString(),
+    packageClosureEntries: authorization.artifact.fileCount,
+    packageClosureSha256: authorization.artifact.closureSha256,
+    packageManifestSha256: authorization.artifact.packageManifestSha256,
+    packageName: authorization.artifact.packageName,
+    packageVersion: authorization.artifact.packageVersion,
+    planDigest: authorization.planDigest,
+    planId: authorization.planId,
+    revision: authorization.revision,
+    vouchPolicyRevision: authorization.vouchPolicyRevision,
+});
+const publicPlanTarget = (plan) => ({
+    adapter: "pi-rpc",
+    adapterVersion: plan.target.adapterVersion,
+    conversationPolicyRevision: plan.target.conversationPolicyRevision,
+    entry: {
+        identity: fileIdentity(plan.target.artifact.entryIdentity),
+        path: plan.target.artifact.entryPath,
+        sha256: plan.target.artifact.entrySha256,
+    },
+    interpreter: {
+        architecture: plan.target.artifact.interpreterArchitecture,
+        identity: fileIdentity(plan.target.artifact.interpreterIdentity),
+        path: plan.target.artifact.interpreterPath,
+        sha256: plan.target.artifact.interpreterSha256,
+        version: "24.19.0",
+    },
+    ownerKinds: publicOwnerKinds(plan.target.ownerKinds),
+    packageClosure: {
+        closureSha256: plan.target.artifact.closureSha256,
+        entryCount: plan.target.artifact.fileCount,
+        manifestFormat: "maia.pi-package-closure/v1",
+        manifestSha256: plan.target.artifact.packageManifestSha256,
+        packageName: plan.target.artifact.packageName,
+        packageRoot: plan.target.artifact.packageRootPath,
+        packageVersion: plan.target.artifact.packageVersion,
+        totalBytes: plan.target.artifact.totalBytes.toString(),
+    },
+    vouchPolicyRevision: plan.target.vouchPolicyRevision,
+});
+const publicPlan = (plan) => ({
+    createdAt: plan.createdAt,
+    expiresAt: plan.expiresAt,
+    integration: "pi-rpc",
+    planBytes: plan.planBytes,
+    planDigest: plan.planDigest,
+    planId: plan.planId,
+    target: publicPlanTarget(plan),
+});
+const executePlan = Effect.fn("IntegrationAuthorization.executePiRpcPlan")(function* (application, request, envelopeCommandId) {
+    const plan = yield* withPiRpcPlanAdmission(application, planPiRpcIntegration(application, {
+        commandId: envelopeCommandId,
+        requestDigest: requestDigest(request),
+    }));
+    return {
+        ...resultIdentity,
+        method: "integration.plan.pi-rpc",
+        plan: publicPlan(plan),
+    };
+});
+const executeApply = Effect.fn("IntegrationAuthorization.executePiRpcApply")(function* (application, request) {
+    const applied = yield* applyPiRpcIntegration(application, {
+        commandId: request.parameters.commandId,
+        planId: request.parameters.planId,
+        requestDigest: requestDigest(request),
+    });
+    if (applied.authorization.state !== "active")
+        return yield* Effect.fail(makeNodeRuntimeError("storage_corrupt", "The Pi RPC apply did not produce active authority."));
+    return {
+        ...resultIdentity,
+        authorization: {
+            ...publicAuthorizationIdentity(applied.authorization),
+            state: "active",
+        },
+        delivery: applied.delivery,
+        method: "integration.apply.pi-rpc",
+        outcome: "applied",
+        receipt: applied.receipt,
+    };
+});
+const activeStatusItem = (shown) => ({
+    activeUnsettledPermits: shown.activeUnsettledPermits,
+    authorization: {
+        ...publicAuthorizationIdentity(shown.authorization),
+        state: "active",
+    },
+    authorizationAvailable: true,
+    nextAction: "none",
+    revokingUnsettledPermits: 0,
+});
+const revokingStatusItem = (shown) => ({
+    activeUnsettledPermits: 0,
+    authorization: {
+        ...publicAuthorizationIdentity(shown.authorization),
+        state: "revoking",
+    },
+    authorizationAvailable: true,
+    nextAction: "wait_for_revocation",
+    revokingUnsettledPermits: shown.revokingUnsettledPermits,
+});
+const cleanupUnknownStatusItem = (shown) => ({
+    activeUnsettledPermits: 0,
+    authorization: {
+        ...publicAuthorizationIdentity(shown.authorization),
+        state: "cleanup_unknown",
+    },
+    authorizationAvailable: true,
+    nextAction: "inspect_cleanup_unknown",
+    revokingUnsettledPermits: shown.revokingUnsettledPermits,
+});
+const inactiveStatusItem = (shown, state) => ({
+    activeUnsettledPermits: 0,
+    authorization: {
+        ...publicAuthorizationIdentity(shown.authorization),
+        state,
+    },
+    authorizationAvailable: true,
+    nextAction: "plan_and_apply",
+    revokingUnsettledPermits: 0,
+});
+const statusItem = (shown) => {
+    if (shown === undefined)
+        return {
+            authorizationAvailable: false,
+            nextAction: "plan_and_apply",
+            reason: "no_authorization",
+        };
+    if (shown.authorization.state === "active")
+        return activeStatusItem(shown);
+    if (shown.authorization.state === "revoking")
+        return revokingStatusItem(shown);
+    if (shown.authorization.state === "cleanup_unknown")
+        return cleanupUnknownStatusItem(shown);
+    if (shown.authorization.state === "revoked")
+        return inactiveStatusItem(shown, "revoked");
+    return inactiveStatusItem(shown, "replaced");
+};
+const executeStatus = Effect.fn("IntegrationAuthorization.executePiRpcStatus")(function* (application) {
+    const shown = yield* withPiRpcPlanAdmission(application, showPiRpcIntegration(application));
+    return {
+        ...resultIdentity,
+        items: [statusItem(shown)],
+        method: "integration.status.pi-rpc",
+    };
+});
+const publicRemoveResult = (removed, state) => ({
+    ...resultIdentity,
+    authorization: {
+        ...publicAuthorizationIdentity(removed.authorization),
+        state,
+    },
+    delivery: removed.delivery,
+    invalidatedIssuedPermits: removed.invalidatedIssuedPermits,
+    method: "integration.remove.pi-rpc",
+    outcome: state,
+    receipt: removed.receipt,
+    remainingUnsettledPermits: removed.remainingUnsettledPermits,
+});
+const executeRemove = Effect.fn("IntegrationAuthorization.executePiRpcRemove")(function* (application, request) {
+    const removed = yield* removePiRpcIntegration(application, {
+        commandId: request.parameters.commandId,
+        requestDigest: requestDigest(request),
+    });
+    const state = removed.authorization.state;
+    if (state !== "revoked" && state !== "cleanup_unknown")
+        return yield* Effect.fail(makeNodeRuntimeError("storage_corrupt", "The Pi RPC removal did not reach a terminal state."));
+    return state === "revoked"
+        ? publicRemoveResult(removed, "revoked")
+        : publicRemoveResult(removed, "cleanup_unknown");
+});
+export const executePiRpcIntegrationAuthorizationRequest = Effect.fn("IntegrationAuthorization.executePiRpcRequest")(function* (application, request, envelopeCommandId) {
+    yield* requirePiRpcIntegrationPlatform();
+    switch (request.method) {
+        case "integration.apply.pi-rpc":
+            return yield* executeApply(application, request);
+        case "integration.plan.pi-rpc":
+            return yield* executePlan(application, request, envelopeCommandId);
+        case "integration.remove.pi-rpc":
+            return yield* executeRemove(application, request);
+        case "integration.status.pi-rpc":
+            return yield* executeStatus(application);
+    }
+});
+//# sourceMappingURL=pi-rpc-requests.js.map

package/dist/integration-authorization/pi-rpc-requests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi-rpc-requests.js","sourceRoot":"","sources":["../../src/integration-authorization/pi-rpc-requests.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,wCAAwC,GAIzC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAGhC,OAAO,EACL,oBAAoB,GAErB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,+BAA+B,EAC/B,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AAajC,MAAM,aAAa,GAAG,CAAC,OAAqB,EAAU,EAAE,CACtD,UAAU,CAAC,QAAQ,CAAC;KACjB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;KAC5D,MAAM,CAAC,KAAK,CAAC,CAAC;AAEnB,MAAM,cAAc,GAAG;IACrB,WAAW,EAAE,QAAiB;IAC9B,gBAAgB,EAAE,KAAc;IAChC,aAAa,EAAE,wCAA6C;CAC7D,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAIrB,EAAE,EAAE,CAAC,CAAC;IACL,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE;IAC7B,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CACvB,UAAsD,EACT,EAAE;IAC/C,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IACtD,IAAI,KAAK,IAAI,OAAO;QAAE,OAAO,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAChE,IAAI,KAAK;QAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACnC,MAAM,oBAAoB,CACxB,iBAAiB,EACjB,8CAA8C,CAC/C,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,2BAA2B,GAAG,CAClC,aAA2C,EACG,EAAE,CAAC,CAAC;IAClD,cAAc,EAAE,aAAa,CAAC,cAAc;IAC5C,0BAA0B,EAAE,aAAa,CAAC,0BAA0B;IACpE,iBAAiB,EAAE,YAAY,CAAC,aAAa,CAAC,QAAQ,CAAC,aAAa,CAAC;IACrE,WAAW,EAAE,aAAa,CAAC,QAAQ,CAAC,WAAW;IAC/C,uBAAuB,EAAE,aAAa,CAAC,QAAQ,CAAC,uBAAuB;IACvE,uBAAuB,EAAE,YAAY,CACnC,aAAa,CAAC,QAAQ,CAAC,mBAAmB,CAC3C;IACD,iBAAiB,EAAE,aAAa,CAAC,QAAQ,CAAC,iBAAiB;IAC3D,kBAAkB,EAAE,SAAS;IAC7B,UAAU,EAAE,gBAAgB,CAAC,aAAa,CAAC,UAAU,CAAC;IACtD,mBAAmB,EAAE,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE;IACjE,qBAAqB,EAAE,aAAa,CAAC,QAAQ,CAAC,SAAS;IACvD,oBAAoB,EAAE,aAAa,CAAC,QAAQ,CAAC,aAAa;IAC1D,qBAAqB,EAAE,aAAa,CAAC,QAAQ,CAAC,qBAAqB;IACnE,WAAW,EAAE,aAAa,CAAC,QAAQ,CAAC,WAAW;IAC/C,cAAc,EAAE,aAAa,CAAC,QAAQ,CAAC,cAAc;IACrD,UAAU,EAAE,aAAa,CAAC,UAAU;IACpC,MAAM,EAAE,aAAa,CAAC,MAAM;IAC5B,QAAQ,EAAE,aAAa,CAAC,QAAQ;IAChC,mBAAmB,EAAE,aAAa,CAAC,mBAAmB;CACvD,CAAC,CAAC;AASH,MAAM,gBAAgB,GAAG,CAAC,IAAa,EAAE,EAAE,CAAC,CAAC;IAC3C,OAAO,EAAE,QAAiB;IAC1B,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc;IAC1C,0BAA0B,EAAE,IAAI,CAAC,MAAM,CAAC,0BAA0B;IAClE,KAAK,EAAE;QACL,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC1D,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS;QACpC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW;KACzC;IACD,WAAW,EAAE;QACX,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB;QAC1D,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAChE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe;QAC1C,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB;QAC9C,OAAO,EAAE,SAAkB;KAC5B;IACD,UAAU,EAAE,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;IACpD,cAAc,EAAE;QACd,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa;QACjD,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS;QAC1C,cAAc,EAAE,4BAAqC;QACrD,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB;QAC1D,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW;QAC7C,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe;QACjD,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc;QACnD,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE;KACvD;IACD,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB;CACrD,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,CAAC,IAAa,EAAE,EAAE,CAAC,CAAC;IACrC,SAAS,EAAE,IAAI,CAAC,SAAS;IACzB,SAAS,EAAE,IAAI,CAAC,SAAS;IACzB,WAAW,EAAE,QAAiB;IAC9B,SAAS,EAAE,IAAI,CAAC,SAAS;IACzB,UAAU,EAAE,IAAI,CAAC,UAAU;IAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;IACnB,MAAM,EAAE,gBAAgB,CAAC,IAAI,CAAC;CAC/B,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,2CAA2C,CAAC,CACxE,QAAQ,CAAC,EACP,WAAgD,EAChD,OAAoB,EACpB,iBAAyB;IAEzB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,sBAAsB,CACxC,WAAW,EACX,oBAAoB,CAAC,WAAW,EAAE;QAChC,SAAS,EAAE,iBAAiB;QAC5B,aAAa,EAAE,aAAa,CAAC,OAAO,CAAC;KACtC,CAAC,CACH,CAAC;IACF,OAAO;QACL,GAAG,cAAc;QACjB,MAAM,EAAE,yBAAyB;QACjC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC;KACvB,CAAC;AACJ,CAAC,CACF,CAAC;AAOF,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,4CAA4C,CAAC,CAC1E,QAAQ,CAAC,EACP,WAAgD,EAChD,OAAqB;IAErB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC,WAAW,EAAE;QACxD,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,SAAS;QACvC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,MAAM;QACjC,aAAa,EAAE,aAAa,CAAC,OAAO,CAAC;KACtC,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,aAAa,CAAC,KAAK,KAAK,QAAQ;QAC1C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,oBAAoB,CAClB,iBAAiB,EACjB,oDAAoD,CACrD,CACF,CAAC;IACJ,OAAO;QACL,GAAG,cAAc;QACjB,aAAa,EAAE;YACb,GAAG,2BAA2B,CAAC,OAAO,CAAC,aAAa,CAAC;YACrD,KAAK,EAAE,QAAQ;SAChB;QACD,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,MAAM,EAAE,0BAA0B;QAClC,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC;AACJ,CAAC,CACF,CAAC;AAKF,MAAM,gBAAgB,GAAG,CAAC,KAAqB,EAAE,EAAE,CAAC,CAAC;IACnD,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;IACpD,aAAa,EAAE;QACb,GAAG,2BAA2B,CAAC,KAAK,CAAC,aAAa,CAAC;QACnD,KAAK,EAAE,QAAiB;KACzB;IACD,sBAAsB,EAAE,IAAa;IACrC,UAAU,EAAE,MAAe;IAC3B,wBAAwB,EAAE,CAAU;CACrC,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,KAAqB,EAAE,EAAE,CAAC,CAAC;IACrD,sBAAsB,EAAE,CAAU;IAClC,aAAa,EAAE;QACb,GAAG,2BAA2B,CAAC,KAAK,CAAC,aAAa,CAAC;QACnD,KAAK,EAAE,UAAmB;KAC3B;IACD,sBAAsB,EAAE,IAAa;IACrC,UAAU,EAAE,qBAA8B;IAC1C,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;CACzD,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,CAAC,KAAqB,EAAE,EAAE,CAAC,CAAC;IAC3D,sBAAsB,EAAE,CAAU;IAClC,aAAa,EAAE;QACb,GAAG,2BAA2B,CAAC,KAAK,CAAC,aAAa,CAAC;QACnD,KAAK,EAAE,iBAA0B;KAClC;IACD,sBAAsB,EAAE,IAAa;IACrC,UAAU,EAAE,yBAAkC;IAC9C,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;CACzD,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CACzB,KAAqB,EACrB,KAA6B,EAC7B,EAAE,CAAC,CAAC;IACJ,sBAAsB,EAAE,CAAU;IAClC,aAAa,EAAE;QACb,GAAG,2BAA2B,CAAC,KAAK,CAAC,aAAa,CAAC;QACnD,KAAK;KACN;IACD,sBAAsB,EAAE,IAAa;IACrC,UAAU,EAAE,gBAAyB;IACrC,wBAAwB,EAAE,CAAU;CACrC,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,CAAC,KAAY,EAAE,EAAE;IAClC,IAAI,KAAK,KAAK,SAAS;QACrB,OAAO;YACL,sBAAsB,EAAE,KAAc;YACtC,UAAU,EAAE,gBAAyB;YACrC,MAAM,EAAE,kBAA2B;SACpC,CAAC;IACJ,IAAI,KAAK,CAAC,aAAa,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC3E,IAAI,KAAK,CAAC,aAAa,CAAC,KAAK,KAAK,UAAU;QAC1C,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,aAAa,CAAC,KAAK,KAAK,iBAAiB;QACjD,OAAO,wBAAwB,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,aAAa,CAAC,KAAK,KAAK,SAAS;QACzC,OAAO,kBAAkB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC9C,OAAO,kBAAkB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;AAC/C,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,MAAM,CAAC,EAAE,CAAC,6CAA6C,CAAC,CAC5E,QAAQ,CAAC,EACP,WAAgD;IAEhD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,sBAAsB,CACzC,WAAW,EACX,oBAAoB,CAAC,WAAW,CAAC,CAClC,CAAC;IACF,OAAO;QACL,GAAG,cAAc;QACjB,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,EAAE,2BAA2B;KACpC,CAAC;AACJ,CAAC,CACF,CAAC;AASF,MAAM,kBAAkB,GAAG,CACzB,OAAgB,EAChB,KAAa,EACb,EAAE,CAAC,CAAC;IACJ,GAAG,cAAc;IACjB,aAAa,EAAE;QACb,GAAG,2BAA2B,CAAC,OAAO,CAAC,aAAa,CAAC;QACrD,KAAK;KACN;IACD,QAAQ,EAAE,OAAO,CAAC,QAAQ;IAC1B,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;IAC1D,MAAM,EAAE,2BAAoC;IAC5C,OAAO,EAAE,KAAK;IACd,OAAO,EAAE,OAAO,CAAC,OAAO;IACxB,yBAAyB,EAAE,OAAO,CAAC,yBAAyB;CAC7D,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,MAAM,CAAC,EAAE,CAAC,6CAA6C,CAAC,CAC5E,QAAQ,CAAC,EACP,WAAgD,EAChD,OAAsB;IAEtB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAAC,WAAW,EAAE;QACzD,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,SAAS;QACvC,aAAa,EAAE,aAAa,CAAC,OAAO,CAAC;KACtC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC;IAC1C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,iBAAiB;QACpD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,oBAAoB,CAClB,iBAAiB,EACjB,oDAAoD,CACrD,CACF,CAAC;IACJ,OAAO,KAAK,KAAK,SAAS;QACxB,CAAC,CAAC,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC;QACxC,CAAC,CAAC,kBAAkB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;AACrD,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,2CAA2C,GAAG,MAAM,CAAC,EAAE,CAClE,8CAA8C,CAC/C,CAAC,QAAQ,CAAC,EACT,WAAgD,EAChD,OAAqB,EACrB,iBAAyB;IAEzB,KAAK,CAAC,CAAC,+BAA+B,EAAE,CAAC;IACzC,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,0BAA0B;YAC7B,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACnD,KAAK,yBAAyB;YAC5B,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;QACrE,KAAK,2BAA2B;YAC9B,OAAO,KAAK,CAAC,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACpD,KAAK,2BAA2B;YAC9B,OAAO,KAAK,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/integration-authorization/requests.d.ts

@@ -0,0 +1,10 @@
+import { type LocalNodeRequestPayload, type LocalNodeSuccessResult } from "@maiaos/protocol";
+import { Effect } from "effect";
+import { type NodeRuntimeError } from "../runtime/errors.js";
+import { type IntegrationAuthorizationApplication } from "./application.js";
+type IntegrationAuthorizationRequest = Extract<LocalNodeRequestPayload, {
+    readonly method: `integration.${string}`;
+}>;
+export declare const executeIntegrationAuthorizationRequest: (application: IntegrationAuthorizationApplication, request: IntegrationAuthorizationRequest, envelopeCommandId: string) => Effect.Effect<LocalNodeSuccessResult, NodeRuntimeError, never>;
+export {};
+//# sourceMappingURL=requests.d.ts.map

package/dist/integration-authorization/requests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requests.d.ts","sourceRoot":"","sources":["../../src/integration-authorization/requests.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAEL,KAAK,mCAAmC,EAOzC,MAAM,kBAAkB,CAAC;AAG1B,KAAK,+BAA+B,GAAG,OAAO,CAC5C,uBAAuB,EACvB;IAAE,QAAQ,CAAC,MAAM,EAAE,eAAe,MAAM,EAAE,CAAA;CAAE,CAC7C,CAAC;AAqQF,eAAO,MAAM,sCAAsC,2LA8BjD,CAAC"}

package/dist/integration-authorization/requests.js

@@ -0,0 +1,208 @@
+import { createHash } from "node:crypto";
+import { INTEGRATION_AUTHORIZATION_SCHEMA_VERSION, } from "@maiaos/protocol";
+import { Effect } from "effect";
+import { makeNodeRuntimeError, } from "../runtime/errors.js";
+import { applyCodexIntegration, planCodexIntegration, removeCodexIntegration, requireDarwinIntegrationAuthorization, showCodexIntegration, withPlanAndStatusAdmission, } from "./application.js";
+import { executePiRpcIntegrationAuthorizationRequest } from "./pi-rpc-requests.js";
+const requestDigest = (request) => createHash("sha256")
+    .update(JSON.stringify([request.method, request.parameters]))
+    .digest("hex");
+const publicOwnerKinds = (ownerKinds) => {
+    const probe = ownerKinds.includes("codex-probe");
+    const session = ownerKinds.includes("codex-session");
+    if (probe && session)
+        return ["codex-probe", "codex-session"];
+    return probe ? ["codex-probe"] : ["codex-session"];
+};
+const publicAuthorizationIdentity = (authorization) => ({
+    adapterVersion: authorization.adapterVersion,
+    executableSha256: authorization.executableSha256,
+    ownerKinds: publicOwnerKinds(authorization.ownerKinds),
+    planDigest: authorization.planDigest,
+    planId: authorization.planId,
+    revision: authorization.revision,
+    sandboxPolicyRevision: authorization.sandboxPolicyRevision,
+    vouchPolicyRevision: authorization.vouchPolicyRevision,
+});
+const integrationResultIdentity = {
+    integration: "codex",
+    releaseQualified: false,
+    schemaVersion: INTEGRATION_AUTHORIZATION_SCHEMA_VERSION,
+};
+const activeStatusItem = (shown) => ({
+    activeUnsettledPermits: shown.activeUnsettledPermits,
+    authorization: {
+        ...publicAuthorizationIdentity(shown.authorization),
+        state: "active",
+    },
+    authorizationAvailable: true,
+    nextAction: "none",
+    revokingUnsettledPermits: 0,
+});
+const revokingStatusItem = (shown) => ({
+    activeUnsettledPermits: 0,
+    authorization: {
+        ...publicAuthorizationIdentity(shown.authorization),
+        state: "revoking",
+    },
+    authorizationAvailable: true,
+    nextAction: "wait_for_revocation",
+    revokingUnsettledPermits: shown.revokingUnsettledPermits,
+});
+const cleanupUnknownStatusItem = (shown) => ({
+    activeUnsettledPermits: 0,
+    authorization: {
+        ...publicAuthorizationIdentity(shown.authorization),
+        state: "cleanup_unknown",
+    },
+    authorizationAvailable: true,
+    nextAction: "inspect_cleanup_unknown",
+    revokingUnsettledPermits: shown.revokingUnsettledPermits,
+});
+const replacedStatusItem = (shown) => ({
+    activeUnsettledPermits: 0,
+    authorization: {
+        ...publicAuthorizationIdentity(shown.authorization),
+        state: "replaced",
+    },
+    authorizationAvailable: true,
+    nextAction: "plan_and_apply",
+    revokingUnsettledPermits: 0,
+});
+const revokedStatusItem = (shown) => ({
+    activeUnsettledPermits: 0,
+    authorization: {
+        ...publicAuthorizationIdentity(shown.authorization),
+        state: "revoked",
+    },
+    authorizationAvailable: true,
+    nextAction: "plan_and_apply",
+    revokingUnsettledPermits: 0,
+});
+const availableStatusItem = (shown) => {
+    switch (shown.authorization.state) {
+        case "active":
+            return activeStatusItem(shown);
+        case "cleanup_unknown":
+            return cleanupUnknownStatusItem(shown);
+        case "revoking":
+            return revokingStatusItem(shown);
+        case "replaced":
+            return replacedStatusItem(shown);
+        case "revoked":
+            return revokedStatusItem(shown);
+    }
+};
+const statusItem = (shown) => shown === undefined
+    ? {
+        authorizationAvailable: false,
+        nextAction: "plan_and_apply",
+        reason: "no_authorization",
+    }
+    : availableStatusItem(shown);
+const executePlanRequest = Effect.fn("IntegrationAuthorization.executePlanRequest")(function* (application, request, envelopeCommandId) {
+    const plan = yield* withPlanAndStatusAdmission(application, planCodexIntegration(application, {
+        commandId: envelopeCommandId,
+        requestDigest: requestDigest(request),
+    }));
+    return {
+        ...integrationResultIdentity,
+        method: "integration.plan.codex",
+        plan: {
+            ...plan,
+            target: {
+                ...plan.target,
+                ownerKinds: publicOwnerKinds(plan.target.ownerKinds),
+            },
+        },
+    };
+});
+const executeApplyRequest = Effect.fn("IntegrationAuthorization.executeApplyRequest")(function* (application, request) {
+    const applied = yield* applyCodexIntegration(application, {
+        commandId: request.parameters.commandId,
+        planId: request.parameters.planId,
+        requestDigest: requestDigest(request),
+    });
+    if (applied.authorization.state !== "active") {
+        return yield* Effect.fail(makeNodeRuntimeError("storage_corrupt", "The Codex integration apply did not produce active authority."));
+    }
+    return {
+        ...integrationResultIdentity,
+        authorization: {
+            ...publicAuthorizationIdentity(applied.authorization),
+            state: "active",
+        },
+        delivery: applied.delivery,
+        method: "integration.apply.codex",
+        outcome: "applied",
+        receipt: applied.receipt,
+    };
+});
+const executeStatusRequest = Effect.fn("IntegrationAuthorization.executeStatusRequest")(function* (application) {
+    const shown = yield* withPlanAndStatusAdmission(application, showCodexIntegration(application));
+    return {
+        ...integrationResultIdentity,
+        items: [statusItem(shown)],
+        method: "integration.status.codex",
+    };
+});
+const removalCommon = (removed) => ({
+    ...integrationResultIdentity,
+    delivery: removed.delivery,
+    invalidatedIssuedPermits: removed.invalidatedIssuedPermits,
+    method: "integration.remove.codex",
+    receipt: removed.receipt,
+    remainingUnsettledPermits: removed.remainingUnsettledPermits,
+});
+const revokedRemovalResult = (removed) => ({
+    ...removalCommon(removed),
+    authorization: {
+        ...publicAuthorizationIdentity(removed.authorization),
+        state: "revoked",
+    },
+    outcome: "revoked",
+});
+const unknownRemovalResult = (removed) => ({
+    ...removalCommon(removed),
+    authorization: {
+        ...publicAuthorizationIdentity(removed.authorization),
+        state: "cleanup_unknown",
+    },
+    outcome: "cleanup_unknown",
+});
+const removalResult = (removed) => {
+    const state = removed.authorization.state;
+    if (state === "revoked")
+        return revokedRemovalResult(removed);
+    if (state === "cleanup_unknown")
+        return unknownRemovalResult(removed);
+    throw makeNodeRuntimeError("storage_corrupt", "The Codex integration removal did not reach a terminal state.");
+};
+const executeRemoveRequest = Effect.fn("IntegrationAuthorization.executeRemoveRequest")(function* (application, request) {
+    return removalResult(yield* removeCodexIntegration(application, {
+        commandId: request.parameters.commandId,
+        requestDigest: requestDigest(request),
+    }));
+});
+export const executeIntegrationAuthorizationRequest = Effect.fn("IntegrationAuthorization.executeRequest")(function* (application, request, envelopeCommandId) {
+    switch (request.method) {
+        case "integration.apply.pi-rpc":
+        case "integration.plan.pi-rpc":
+        case "integration.remove.pi-rpc":
+        case "integration.status.pi-rpc":
+            return yield* executePiRpcIntegrationAuthorizationRequest(application, request, envelopeCommandId);
+        case "integration.plan.codex":
+            yield* requireDarwinIntegrationAuthorization();
+            return yield* executePlanRequest(application, request, envelopeCommandId);
+        case "integration.apply.codex":
+            yield* requireDarwinIntegrationAuthorization();
+            return yield* executeApplyRequest(application, request);
+        case "integration.status.codex":
+            yield* requireDarwinIntegrationAuthorization();
+            return yield* executeStatusRequest(application);
+        case "integration.remove.codex":
+            yield* requireDarwinIntegrationAuthorization();
+            return yield* executeRemoveRequest(application, request);
+    }
+});
+//# sourceMappingURL=requests.js.map

package/dist/integration-authorization/requests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requests.js","sourceRoot":"","sources":["../../src/integration-authorization/requests.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,wCAAwC,GAIzC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,OAAO,EACL,oBAAoB,GAErB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,qBAAqB,EAErB,oBAAoB,EACpB,sBAAsB,EACtB,qCAAqC,EACrC,oBAAoB,EAEpB,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,2CAA2C,EAAE,MAAM,sBAAsB,CAAC;AAmBnF,MAAM,aAAa,GAAG,CAAC,OAAwC,EAAU,EAAE,CACzE,UAAU,CAAC,QAAQ,CAAC;KACjB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;KAC5D,MAAM,CAAC,KAAK,CAAC,CAAC;AAEnB,MAAM,gBAAgB,GAAG,CACvB,UAAiD,EACT,EAAE;IAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IACrD,IAAI,KAAK,IAAI,OAAO;QAAE,OAAO,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;AACrD,CAAC,CAAC;AAOF,MAAM,2BAA2B,GAAG,CAClC,aAAsC,EACT,EAAE,CAAC,CAAC;IACjC,cAAc,EAAE,aAAa,CAAC,cAAc;IAC5C,gBAAgB,EAAE,aAAa,CAAC,gBAAgB;IAChD,UAAU,EAAE,gBAAgB,CAAC,aAAa,CAAC,UAAU,CAAC;IACtD,UAAU,EAAE,aAAa,CAAC,UAAU;IACpC,MAAM,EAAE,aAAa,CAAC,MAAM;IAC5B,QAAQ,EAAE,aAAa,CAAC,QAAQ;IAChC,qBAAqB,EAAE,aAAa,CAAC,qBAAqB;IAC1D,mBAAmB,EAAE,aAAa,CAAC,mBAAmB;CACvD,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG;IAChC,WAAW,EAAE,OAAgB;IAC7B,gBAAgB,EAAE,KAAc;IAChC,aAAa,EAAE,wCAA6C;CAC7D,CAAC;AAIF,MAAM,gBAAgB,GAAG,CAAC,KAAsB,EAAE,EAAE,CAAC,CAAC;IACpD,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;IACpD,aAAa,EAAE;QACb,GAAG,2BAA2B,CAAC,KAAK,CAAC,aAAa,CAAC;QACnD,KAAK,EAAE,QAAiB;KACzB;IACD,sBAAsB,EAAE,IAAa;IACrC,UAAU,EAAE,MAAe;IAC3B,wBAAwB,EAAE,CAAU;CACrC,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,KAAsB,EAAE,EAAE,CAAC,CAAC;IACtD,sBAAsB,EAAE,CAAU;IAClC,aAAa,EAAE;QACb,GAAG,2BAA2B,CAAC,KAAK,CAAC,aAAa,CAAC;QACnD,KAAK,EAAE,UAAmB;KAC3B;IACD,sBAAsB,EAAE,IAAa;IACrC,UAAU,EAAE,qBAA8B;IAC1C,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;CACzD,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,CAAC,KAAsB,EAAE,EAAE,CAAC,CAAC;IAC5D,sBAAsB,EAAE,CAAU;IAClC,aAAa,EAAE;QACb,GAAG,2BAA2B,CAAC,KAAK,CAAC,aAAa,CAAC;QACnD,KAAK,EAAE,iBAA0B;KAClC;IACD,sBAAsB,EAAE,IAAa;IACrC,UAAU,EAAE,yBAAkC;IAC9C,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;CACzD,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,KAAsB,EAAE,EAAE,CAAC,CAAC;IACtD,sBAAsB,EAAE,CAAU;IAClC,aAAa,EAAE;QACb,GAAG,2BAA2B,CAAC,KAAK,CAAC,aAAa,CAAC;QACnD,KAAK,EAAE,UAAmB;KAC3B;IACD,sBAAsB,EAAE,IAAa;IACrC,UAAU,EAAE,gBAAyB;IACrC,wBAAwB,EAAE,CAAU;CACrC,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,KAAsB,EAAE,EAAE,CAAC,CAAC;IACrD,sBAAsB,EAAE,CAAU;IAClC,aAAa,EAAE;QACb,GAAG,2BAA2B,CAAC,KAAK,CAAC,aAAa,CAAC;QACnD,KAAK,EAAE,SAAkB;KAC1B;IACD,sBAAsB,EAAE,IAAa;IACrC,UAAU,EAAE,gBAAyB;IACrC,wBAAwB,EAAE,CAAU;CACrC,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,KAAsB,EAAE,EAAE;IACrD,QAAQ,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAClC,KAAK,QAAQ;YACX,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACjC,KAAK,iBAAiB;YACpB,OAAO,wBAAwB,CAAC,KAAK,CAAC,CAAC;QACzC,KAAK,UAAU;YACb,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACnC,KAAK,UAAU;YACb,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACnC,KAAK,SAAS;YACZ,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,KAA4B,EAAE,EAAE,CAClD,KAAK,KAAK,SAAS;IACjB,CAAC,CAAC;QACE,sBAAsB,EAAE,KAAc;QACtC,UAAU,EAAE,gBAAyB;QACrC,MAAM,EAAE,kBAA2B;KACpC;IACH,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;AAEjC,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAClC,6CAA6C,CAC9C,CAAC,QAAQ,CAAC,EACT,WAAgD,EAChD,OAAoB,EACpB,iBAAyB;IAEzB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,0BAA0B,CAC5C,WAAW,EACX,oBAAoB,CAAC,WAAW,EAAE;QAChC,SAAS,EAAE,iBAAiB;QAC5B,aAAa,EAAE,aAAa,CAAC,OAAO,CAAC;KACtC,CAAC,CACH,CAAC;IACF,OAAO;QACL,GAAG,yBAAyB;QAC5B,MAAM,EAAE,wBAAwB;QAChC,IAAI,EAAE;YACJ,GAAG,IAAI;YACP,MAAM,EAAE;gBACN,GAAG,IAAI,CAAC,MAAM;gBACd,UAAU,EAAE,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;aACrD;SACF;KACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CACnC,8CAA8C,CAC/C,CAAC,QAAQ,CAAC,EACT,WAAgD,EAChD,OAAqB;IAErB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC,WAAW,EAAE;QACxD,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,SAAS;QACvC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,MAAM;QACjC,aAAa,EAAE,aAAa,CAAC,OAAO,CAAC;KACtC,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,aAAa,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,oBAAoB,CAClB,iBAAiB,EACjB,+DAA+D,CAChE,CACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,GAAG,yBAAyB;QAC5B,aAAa,EAAE;YACb,GAAG,2BAA2B,CAAC,OAAO,CAAC,aAAa,CAAC;YACrD,KAAK,EAAE,QAAQ;SAChB;QACD,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,MAAM,EAAE,yBAAyB;QACjC,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,MAAM,CAAC,EAAE,CACpC,+CAA+C,CAChD,CAAC,QAAQ,CAAC,EACT,WAAgD;IAEhD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,0BAA0B,CAC7C,WAAW,EACX,oBAAoB,CAAC,WAAW,CAAC,CAClC,CAAC;IACF,OAAO;QACL,GAAG,yBAAyB;QAC5B,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,EAAE,0BAA0B;KACnC,CAAC;AACJ,CAAC,CAAC,CAAC;AAIH,MAAM,aAAa,GAAG,CAAC,OAAgB,EAAE,EAAE,CAAC,CAAC;IAC3C,GAAG,yBAAyB;IAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;IAC1B,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;IAC1D,MAAM,EAAE,0BAAmC;IAC3C,OAAO,EAAE,OAAO,CAAC,OAAO;IACxB,yBAAyB,EAAE,OAAO,CAAC,yBAAyB;CAC7D,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAAC,OAAgB,EAA0B,EAAE,CAAC,CAAC;IAC1E,GAAG,aAAa,CAAC,OAAO,CAAC;IACzB,aAAa,EAAE;QACb,GAAG,2BAA2B,CAAC,OAAO,CAAC,aAAa,CAAC;QACrD,KAAK,EAAE,SAAS;KACjB;IACD,OAAO,EAAE,SAAS;CACnB,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAAC,OAAgB,EAA0B,EAAE,CAAC,CAAC;IAC1E,GAAG,aAAa,CAAC,OAAO,CAAC;IACzB,aAAa,EAAE;QACb,GAAG,2BAA2B,CAAC,OAAO,CAAC,aAAa,CAAC;QACrD,KAAK,EAAE,iBAAiB;KACzB;IACD,OAAO,EAAE,iBAAiB;CAC3B,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,OAAgB,EAA0B,EAAE;IACjE,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC;IAC1C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9D,IAAI,KAAK,KAAK,iBAAiB;QAAE,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACtE,MAAM,oBAAoB,CACxB,iBAAiB,EACjB,+DAA+D,CAChE,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,MAAM,CAAC,EAAE,CACpC,+CAA+C,CAChD,CAAC,QAAQ,CAAC,EACT,WAAgD,EAChD,OAAsB;IAEtB,OAAO,aAAa,CAClB,KAAK,CAAC,CAAC,sBAAsB,CAAC,WAAW,EAAE;QACzC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,SAAS;QACvC,aAAa,EAAE,aAAa,CAAC,OAAO,CAAC;KACtC,CAAC,CACH,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sCAAsC,GAAG,MAAM,CAAC,EAAE,CAC7D,yCAAyC,CAC1C,CAAC,QAAQ,CAAC,EACT,WAAgD,EAChD,OAAwC,EACxC,iBAAyB;IAEzB,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,0BAA0B,CAAC;QAChC,KAAK,yBAAyB,CAAC;QAC/B,KAAK,2BAA2B,CAAC;QACjC,KAAK,2BAA2B;YAC9B,OAAO,KAAK,CAAC,CAAC,2CAA2C,CACvD,WAAW,EACX,OAAO,EACP,iBAAiB,CAClB,CAAC;QACJ,KAAK,wBAAwB;YAC3B,KAAK,CAAC,CAAC,qCAAqC,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAC,CAAC,kBAAkB,CAAC,WAAW,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAC5E,KAAK,yBAAyB;YAC5B,KAAK,CAAC,CAAC,qCAAqC,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAC,CAAC,mBAAmB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC1D,KAAK,0BAA0B;YAC7B,KAAK,CAAC,CAAC,qCAAqC,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAC,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;QAClD,KAAK,0BAA0B;YAC7B,KAAK,CAAC,CAAC,qCAAqC,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAC,CAAC,oBAAoB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/invocation-context/application.d.ts

@@ -0,0 +1,34 @@
+import { Effect } from "effect";
+import { type NodeRuntimeError } from "../runtime/errors.js";
+export type UnsupervisedAttachmentKind = "dispatch" | "run" | "session";
+export type UnsupervisedAttachmentOperation = "issue" | "renew" | "revoke";
+export declare const showAuthenticatedClientContext: (profile: string) => Effect.Effect<{
+    readonly schemaVersion: "maia.invocation-context/v1";
+    readonly actorId: "actor_local_user";
+    readonly method: "context.show";
+    readonly attachmentUsed: false;
+    readonly principal: {
+        readonly id: string;
+        readonly kind: "client";
+    };
+    readonly allowedActions: readonly string[];
+    readonly contextRevision: string;
+    readonly expiresAt?: string | undefined;
+    readonly deviceId?: string | undefined;
+    readonly issuedAt?: string | undefined;
+    readonly nodeId?: string | undefined;
+    readonly related?: {
+        readonly workspaceId?: string | undefined;
+        readonly agentId?: string | undefined;
+        readonly attemptId?: string | undefined;
+        readonly cursor?: string | undefined;
+        readonly dispatchId?: string | undefined;
+        readonly instanceId?: string | undefined;
+        readonly mailboxId?: string | undefined;
+        readonly runId?: string | undefined;
+        readonly sessionId?: string | undefined;
+        readonly taskId?: string | undefined;
+    } | undefined;
+}, NodeRuntimeError, never>;
+export declare const refuseUnsupervisedInvocationAttachment: (operation: UnsupervisedAttachmentOperation, kind: UnsupervisedAttachmentKind) => Effect.Effect<never, NodeRuntimeError, never>;
+//# sourceMappingURL=application.d.ts.map

package/dist/invocation-context/application.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"application.d.ts","sourceRoot":"","sources":["../../src/invocation-context/application.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAI9B,MAAM,MAAM,0BAA0B,GAAG,UAAU,GAAG,KAAK,GAAG,SAAS,CAAC;AACxE,MAAM,MAAM,+BAA+B,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE3E,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;4BAkBW,CAAA;wBACnB,CAAC;0BAEN,CAAC;uBACD,CAAC;2BACc,CAAA;2BAE3B,CAAC;0BAEX,CAAC;sBAA4C,CAAC;0BAI7C,CAAC;uBAA6C,CAAC;;2BAftD,CAAC;AAEH,eAAO,MAAM,sCAAsC,iIAYjD,CAAC"}

package/dist/invocation-context/application.js

@@ -0,0 +1,14 @@
+import { invocationContextShowResultSchema, } from "@maiaos/protocol";
+import { Effect } from "effect";
+import { makeNodeRuntimeError, } from "../runtime/errors.js";
+import { resolveAuthenticatedClientContext } from "./resolver.js";
+export const showAuthenticatedClientContext = Effect.fn("InvocationContext.show")(function* (profile) {
+    return yield* Effect.try({
+        catch: () => makeNodeRuntimeError("internal_error", "The authenticated Client invocation context is invalid."),
+        try: () => invocationContextShowResultSchema.parse(resolveAuthenticatedClientContext({ profile })),
+    });
+});
+export const refuseUnsupervisedInvocationAttachment = Effect.fn("InvocationContext.refuseAttachment")(function* (operation, kind) {
+    return yield* Effect.fail(makeNodeRuntimeError("command_not_implemented", `Unsupervised ${kind} Invocation attachment ${operation} is refused.`));
+});
+//# sourceMappingURL=application.js.map

package/dist/invocation-context/application.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"application.js","sourceRoot":"","sources":["../../src/invocation-context/application.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,iCAAiC,GAClC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,OAAO,EACL,oBAAoB,GAErB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,iCAAiC,EAAE,MAAM,eAAe,CAAC;AAKlE,MAAM,CAAC,MAAM,8BAA8B,GAAG,MAAM,CAAC,EAAE,CACrD,wBAAwB,CACzB,CAAC,QAAQ,CAAC,EACT,OAAe;IAEf,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QACvB,KAAK,EAAE,GAAG,EAAE,CACV,oBAAoB,CAClB,gBAAgB,EAChB,yDAAyD,CAC1D;QACH,GAAG,EAAE,GAAG,EAAE,CACR,iCAAiC,CAAC,KAAK,CACrC,iCAAiC,CAAC,EAAE,OAAO,EAAE,CAAC,CAC/C;KACJ,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sCAAsC,GAAG,MAAM,CAAC,EAAE,CAC7D,oCAAoC,CACrC,CAAC,QAAQ,CAAC,EACT,SAA0C,EAC1C,IAAgC;IAEhC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,oBAAoB,CAClB,yBAAyB,EACzB,gBAAgB,IAAI,0BAA0B,SAAS,cAAc,CACtE,CACF,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/invocation-context/resolver.d.ts

@@ -0,0 +1,6 @@
+import { type InvocationContextShowResult } from "@maiaos/protocol";
+export declare const LOCAL_INVOCATION_CONTEXT_REVISION = "1";
+export declare const resolveAuthenticatedClientContext: (_input: {
+    readonly profile: string;
+}) => InvocationContextShowResult;
+//# sourceMappingURL=resolver.d.ts.map

package/dist/invocation-context/resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../src/invocation-context/resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,2BAA2B,EACjC,MAAM,kBAAkB,CAAC;AAE1B,eAAO,MAAM,iCAAiC,MAAM,CAAC;AAErD,eAAO,MAAM,iCAAiC,GAAI,QAAQ;IACxD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,KAAG,2BAWF,CAAC"}

package/dist/invocation-context/resolver.js

@@ -0,0 +1,15 @@
+import { INVOCATION_CONTEXT_ACTOR_LOCAL_USER, INVOCATION_CONTEXT_ALLOWED_ACTION_SHOW, INVOCATION_CONTEXT_CLIENT_PRINCIPAL_ID, INVOCATION_CONTEXT_SCHEMA_VERSION, } from "@maiaos/protocol";
+export const LOCAL_INVOCATION_CONTEXT_REVISION = "1";
+export const resolveAuthenticatedClientContext = (_input) => ({
+    actorId: INVOCATION_CONTEXT_ACTOR_LOCAL_USER,
+    allowedActions: [INVOCATION_CONTEXT_ALLOWED_ACTION_SHOW],
+    attachmentUsed: false,
+    contextRevision: LOCAL_INVOCATION_CONTEXT_REVISION,
+    method: "context.show",
+    principal: {
+        id: INVOCATION_CONTEXT_CLIENT_PRINCIPAL_ID,
+        kind: "client",
+    },
+    schemaVersion: INVOCATION_CONTEXT_SCHEMA_VERSION,
+});
+//# sourceMappingURL=resolver.js.map

package/dist/invocation-context/resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../../src/invocation-context/resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mCAAmC,EACnC,sCAAsC,EACtC,sCAAsC,EACtC,iCAAiC,GAElC,MAAM,kBAAkB,CAAC;AAE1B,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,CAAC;AAErD,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,MAEjD,EAA+B,EAAE,CAAC,CAAC;IAClC,OAAO,EAAE,mCAAmC;IAC5C,cAAc,EAAE,CAAC,sCAAsC,CAAC;IACxD,cAAc,EAAE,KAAK;IACrB,eAAe,EAAE,iCAAiC;IAClD,MAAM,EAAE,cAAc;IACtB,SAAS,EAAE;QACT,EAAE,EAAE,sCAAsC;QAC1C,IAAI,EAAE,QAAQ;KACf;IACD,aAAa,EAAE,iCAAiC;CACjD,CAAC,CAAC"}

package/dist/lifecycle/node-machine.d.ts

@@ -0,0 +1,45 @@
+import { type StateValue } from "xstate";
+export type NodeLifecycleEvent = {
+    readonly type: "fail";
+} | {
+    readonly type: "force";
+} | {
+    readonly type: "ready";
+} | {
+    readonly type: "start";
+} | {
+    readonly type: "stop";
+} | {
+    readonly type: "stopped";
+};
+export declare const nodeLifecycleMachine: import("xstate").StateMachine<{}, {
+    readonly type: "fail";
+} | {
+    readonly type: "force";
+} | {
+    readonly type: "ready";
+} | {
+    readonly type: "start";
+} | {
+    readonly type: "stop";
+} | {
+    readonly type: "stopped";
+}, {}, never, never, never, never, "failed" | "starting" | "stopped" | "ready" | {
+    draining: "graceful" | "forced";
+}, string, import("xstate").NonReducibleUnknown, import("xstate").NonReducibleUnknown, import("xstate").EventObject, import("xstate").MetaObject, {
+    id: "maia-node";
+    states: {
+        readonly draining: {
+            states: {
+                readonly forced: {};
+                readonly graceful: {};
+            };
+        };
+        readonly failed: {};
+        readonly ready: {};
+        readonly starting: {};
+        readonly stopped: {};
+    };
+}>;
+export declare const describeNodeLifecycle: (value: StateValue) => "draining" | "failed" | "ready" | "starting" | "stopped";
+//# sourceMappingURL=node-machine.d.ts.map

package/dist/lifecycle/node-machine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-machine.d.ts","sourceRoot":"","sources":["../../src/lifecycle/node-machine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,KAAK,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEhD,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAC1B;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAC1B;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAC1B;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC;AAEjC,eAAO,MAAM,oBAAoB;mBAPZ,MAAM;;mBACN,OAAO;;mBACP,OAAO;;mBACP,OAAO;;mBACP,MAAM;;mBACN,SAAS;;;;;;;;;;;;;;;;;EAiD5B,CAAC;AAEH,eAAO,MAAM,qBAAqB,GAChC,OAAO,UAAU,KAChB,UAAU,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,GAAG,SAejD,CAAC"}